commit
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill incorporates a proactive security measure in Section 7.4 (Secrets blocklist), which explicitly instructs the agent to search for staged sensitive files—such as environment variables (
.env), private keys (.pem,.key), and credentials—before finalizing a commit to prevent accidental data exposure. - [SAFE]: The provided scripts (
analyze-history.sh,scaffold-dialect.sh) are local tools used for repository metadata analysis and document generation. They rely on standard system utilities (git,grep,awk,perl) and do not perform network operations or access unauthorized file paths. - [SAFE]: The instructions focus entirely on improving git workflow and history durability. There are no attempts at prompt injection, obfuscation, or privilege escalation.
- [SAFE]: All external references and methodologies (Conventional Commits, Tim Pope, etc.) are well-known industry standards.
Audit Metadata